Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cf19594-eb38-3775-a137-d6513f6a4c97.roa
File:                     6cf19594-eb38-3775-a137-d6513f6a4c97.roa (raw, json)
Hash identifier:          dTY81v1fK/DPtPyYNQu5sv/aKKThn9CgkFmkueD8MMA=
Subject key identifier:   B2:70:90:E7:42:E5:B0:27:9F:0F:D3:BA:91:71:9C:A5:40:2D:D0:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCE470CBA067505673B52C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cf19594-eb38-3775-a137-d6513f6a4c97.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     393756
IP address blocks:        24.153.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:47:0c:ba:06:75:05:67:3b:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=3d395647-1f61-4ba3-9b18-653843344765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:4b:d4:b3:e8:3b:ab:db:c2:40:19:9e:79:
                    87:9d:50:4d:1d:6e:77:9e:6e:09:ec:24:a9:6d:2d:
                    87:6a:7e:ac:2b:a4:55:b6:3f:0e:06:10:db:0e:01:
                    cf:7e:3b:8c:ef:20:48:69:80:5e:a0:06:4b:49:5a:
                    30:30:cf:6b:c4:36:12:7f:73:09:fa:12:b1:be:61:
                    ce:e7:9a:ff:ab:50:0a:6d:f9:94:8a:d0:6b:3c:43:
                    b7:0e:f8:99:58:de:8e:6f:7a:3c:c2:a9:ff:16:3f:
                    f7:11:8e:50:24:73:21:93:33:00:e9:a1:dd:94:6b:
                    a9:e4:3d:7c:d2:8b:9f:c8:8b:20:bf:5d:79:3d:a5:
                    88:06:d3:c0:75:c0:75:fe:14:8d:98:a1:53:02:4f:
                    d7:4c:95:54:66:92:4a:fb:67:16:c5:89:6e:d3:d1:
                    65:61:67:fc:9d:5a:6d:aa:43:bc:ca:17:f9:d5:98:
                    b6:38:7a:a1:05:8d:71:66:75:55:dc:5b:d3:8f:df:
                    5c:40:a0:83:c9:38:24:d0:fc:54:83:15:23:bd:8f:
                    f9:6a:04:32:91:8b:33:c4:5b:4f:4e:f6:58:36:46:
                    da:bf:13:80:dd:e3:0c:69:72:13:91:08:cf:7e:ff:
                    23:58:17:ef:0b:f7:e0:60:2a:b2:2f:0d:a6:e0:81:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:90:E7:42:E5:B0:27:9F:0F:D3:BA:91:71:9C:A5:40:2D:D0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cf19594-eb38-3775-a137-d6513f6a4c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:59:b9:20:33:8b:f7:6e:d9:e4:b3:a6:73:18:b3:f5:e0:fe:
         2a:9e:8c:f3:23:8f:b9:5f:df:52:3e:9c:03:3f:59:a4:73:93:
         78:21:f0:b1:5a:6f:25:59:1f:b8:b9:b3:3d:64:fa:5e:88:4d:
         bc:98:dc:f8:14:58:11:9e:20:ef:0e:e7:90:9c:f4:08:62:50:
         6d:6f:e0:39:45:0e:7e:8b:4d:22:6c:28:d8:c5:03:09:48:d1:
         00:0a:3f:b3:1d:ef:02:4c:d1:29:bc:2e:eb:ba:9c:ba:b6:ab:
         7d:cc:5b:9f:b6:4f:5d:b4:08:f1:70:4e:96:c2:e7:56:05:c4:
         87:2f:af:e1:d4:4c:d3:1e:b2:7b:4b:05:d8:47:1d:dd:47:e1:
         28:97:9b:ff:1a:c3:9f:72:9a:5b:d9:9a:50:7e:1c:98:6c:71:
         d1:7e:dc:19:fa:b5:bd:9a:cc:9c:6e:cb:40:34:1d:5c:57:db:
         60:8c:9b:cc:f1:30:28:aa:34:da:54:c5:74:0c:57:f5:ca:4b:
         33:dc:d3:fb:a6:1b:dc:05:76:44:43:92:0a:22:6c:96:56:59:
         88:37:c6:49:de:7a:dc:d1:5d:1c:98:1a:bd:19:f4:db:68:41:
         ba:54:33:4f:c6:51:a2:a4:bc:62:12:6d:af:d0:ae:8b:27:a4:
         5a:a9:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:13 2024 by rpki-client on console-fra.rpki-client.org